Have you ever had the need to audit when members of specific groups logon to a computer? If yes, unfortunately this is only possible out-of-the-box in both Windows Vista and Windows Server 2008. The feature is called "Auditing Special Groups" and you can configure it through the GPMC in Windows Server 2008 and hopelly soon in Windows Vista SP1 after the release of the "Remote Server Administration Tools". If you have Windows Vista RTM, the GPMC is already included in the OS by default (it is removed after installing SP1). The configuration in the GPO is done through "Group Policy Preferences".

 

For more information see:

 

Cheers,

Jorge

--------------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
--------------------------------------------------------------------------------------------------
############### Jorge's Quest For Knowledge ###############
######## http://blogs.dirteam.com/blogs/jorge/default.aspx #########
--------------------------------------------------------------------------------------------------